This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
File: Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft (raw, json)
Hash identifier: y9PZcHSXtiIETv+knoQJ0Rg/hLLhyogzFYG+gq5Iuhg=
Subject key identifier: F1:0B:4E:38:2B:B7:83:C2:E0:4A:9F:8A:C1:77:C2:44:54:49:90:B1
Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Certificate serial: 019AF20919DFD116423FA192B710BF136367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
Manifest number: 0955
Signing time: Sat 06 Dec 2025 05:01:13 +0000
Manifest this update: Sat 06 Dec 2025 05:01:13 +0000
Manifest next update: Sun 07 Dec 2025 05:01:13 +0000
Files and hashes: 1: HJqh9LPhNU96BEOoiCFDiOzAQPY.roa (hash: Kn8EOpw3bBi0iQXW8fO4Sjg58AKy7QrqKxqXj68ts98=)
2: X5N0k5_edi7TUbUxF9SeBJzV_dk.roa (hash: gP57pvGIpr/XNDn/RWR3jdseR7kJZgIx0hgFuiONUXA=)
3: Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl (hash: jq6OoBrYNwuzra41o4V5LUU8KceobXZ3dZ9YEqIXqDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:19:df:d1:16:42:3f:a1:92:b7:10:bf:13:63:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Validity
Not Before: Dec 6 05:01:13 2025 GMT
Not After : Dec 7 05:01:13 2025 GMT
Subject: CN=f10b4e382bb783c2e04a9f8ac177c244544990b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:b4:8e:85:9e:ca:5d:f5:76:e2:1b:c1:63:
8e:25:5c:31:6e:6e:a5:94:72:55:ae:43:33:38:0b:
61:da:e7:d0:a1:4e:8c:16:6f:f1:f0:1b:4c:a7:e7:
50:06:75:15:0a:79:d8:ac:2c:3a:fb:69:2b:9f:e4:
66:44:94:82:df:ec:53:b6:1b:1b:c6:ac:b7:79:5d:
4a:17:d4:33:17:db:09:a6:1a:f1:c5:6c:18:d0:a2:
a1:9d:5f:fe:30:72:40:68:33:54:91:d6:f8:25:1c:
f4:43:4e:7a:f6:77:66:4c:b4:05:f9:6f:c0:a6:28:
c6:57:3c:4d:4e:28:76:d2:85:2e:53:12:84:f7:11:
db:6f:99:3d:72:cf:e4:b4:ab:be:1f:47:ac:f4:67:
01:38:3e:98:63:44:02:b0:ea:08:08:56:3f:95:0d:
3d:1b:82:7a:d1:4c:c1:4c:8e:a7:94:70:90:81:57:
12:df:2e:ae:18:84:e4:6d:22:7c:7b:a6:20:9a:9e:
79:48:b6:c9:fe:0e:a4:25:6f:94:3c:d8:10:f6:66:
b5:54:d8:ff:52:cd:d2:62:51:f8:09:9f:c3:13:5c:
ea:ca:19:68:63:1b:58:66:8b:af:82:03:2f:b6:14:
46:b2:ce:93:8a:b8:7f:df:2a:62:2d:b0:7e:c5:c7:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:4E:38:2B:B7:83:C2:E0:4A:9F:8A:C1:77:C2:44:54:49:90:B1
X509v3 Authority Key Identifier:
keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9c:c7:ed:ec:74:2d:d1:58:62:0c:4a:54:13:a3:39:80:66:
7f:72:db:bc:2e:98:01:cc:61:78:36:2a:b1:0f:ef:ad:b4:ab:
63:bf:61:fe:cc:d5:c1:77:08:71:2b:65:4c:e4:12:50:4a:ff:
90:88:45:46:1e:29:e6:ea:a0:1c:5d:5e:3f:fa:fb:89:2d:45:
f1:7d:28:a6:69:93:ca:21:01:85:71:c9:2f:b3:2e:87:e3:02:
58:35:dc:b3:ad:4a:60:65:b3:d5:db:df:6f:5c:c8:f2:44:a3:
6c:e1:cc:8c:e7:5a:03:d0:b0:c4:2f:94:5a:04:fb:17:b6:24:
d2:f8:fe:ac:41:5c:be:71:c3:1d:f8:60:3b:d8:f9:2c:e0:10:
6d:53:5e:7a:a5:59:24:8f:a4:3a:d7:dd:1b:a8:2b:6a:0d:9d:
a3:fa:17:9d:f4:71:e5:51:8b:75:74:bc:36:5b:43:40:97:0b:
d4:5c:ab:c1:b5:17:3f:85:d8:e8:7a:b5:49:c3:7d:9a:b3:40:
a8:01:bf:60:a7:ff:51:3f:7c:08:ec:8d:7d:8f:71:b2:0e:19:
44:42:fa:ca:8c:f0:f3:35:78:67:60:c3:e0:e3:e5:e7:f7:ab:
70:9e:68:87:bc:ee:6f:9a:7d:57:2b:4d:d3:8e:cc:49:cb:01:
0f:10:3e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCRnf0RZCP6GStxC/E2NnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGZjODljMDdhZTEzMzFiZmIzNzEzODU2OGVhNzlhODdm
ZWNmM2IwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD
EyhmMTBiNGUzODJiYjc4M2MyZTA0YTlmOGFjMTc3YzI0NDU0NDk5MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNa0joWeyl31duIbwWOOJVwxbm6l
lHJVrkMzOAth2ufQoU6MFm/x8BtMp+dQBnUVCnnYrCw6+2krn+RmRJSC3+xTthsb
xqy3eV1KF9QzF9sJphrxxWwY0KKhnV/+MHJAaDNUkdb4JRz0Q0569ndmTLQF+W/A
pijGVzxNTih20oUuUxKE9xHbb5k9cs/ktKu+H0es9GcBOD6YY0QCsOoICFY/lQ09
G4J60UzBTI6nlHCQgVcS3y6uGITkbSJ8e6Ygmp55SLbJ/g6kJW+UPNgQ9ma1VNj/
Us3SYlH4CZ/DE1zqyhloYxtYZouvggMvthRGss6Tirh/3ypiLbB+xcepBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPELTjgrt4PC4EqfisF3wkRUSZCxMB8GA1UdIwQY
MBaAFGbfyJwHrhMxv7NxOFaOp5qH/s87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMt
MTljOTI5OGZmNWQ1LzEvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMtMTljOTI5OGZmNWQ1
LzEvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepzH7ex0
LdFYYgxKVBOjOYBmf3LbvC6YAcxheDYqsQ/vrbSrY79h/szVwXcIcStlTOQSUEr/
kIhFRh4p5uqgHF1eP/r7iS1F8X0opmmTyiEBhXHJL7Muh+MCWDXcs61KYGWz1dvf
b1zI8kSjbOHMjOdaA9CwxC+UWgT7F7Yk0vj+rEFcvnHDHfhgO9j5LOAQbVNeeqVZ
JI+kOtfdG6grag2do/oXnfRx5VGLdXS8NltDQJcL1FyrwbUXP4XY6Hq1ScN9mrNA
qAG/YKf/UT98COyNfY9xsg4ZREL6yozw8zV4Z2DD4OPl5/ercJ5oh7zub5p9VytN
047MScsBDxA+zg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:07:08 2025 by rpki-client